CVE-2009-2482: Medium severity netbsd current vulnerability
Published Jul 16, 2009
·Updated
The pamunix module in OpenPAM in NetBSD 4.0 before 4.0.2 and 5.0 before 5.0.1 allows local users to change the current root password if it is already known, even when they are not in the wheel group.
Affected Software
7 affected components
NetBSD NetBSD=4.0
NetBSD NetBSD=4.0-beta
NetBSD NetBSD=4.0-beta2
NetBSD NetBSD=4.0.1
NetBSD NetBSD=4.1
NetBSD NetBSD=5.0
NetBSD NetBSD=5.0-rc3
Event History
Jul 16, 2009
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-2482?
CVE-2009-2482 is considered a high severity vulnerability as it allows local users to change the root password.
2
How do I fix CVE-2009-2482?
To fix CVE-2009-2482, you should upgrade to NetBSD version 4.0.2 or later, or 5.0.1 or later.
3
Who is affected by CVE-2009-2482?
CVE-2009-2482 affects local users of NetBSD 4.0, 4.0-beta, 4.0-beta2, 4.0.1, 4.1, 5.0, and 5.0-rc3.
4
What systems does CVE-2009-2482 impact?
CVE-2009-2482 impacts NetBSD operating systems prior to the specified fixed versions.
5
Can I exploit CVE-2009-2482 remotely?
No, CVE-2009-2482 can only be exploited locally by users who already know the current root password.